viratgunderi-cell-fuelstationpro-backend-instructions.ocm.json json {
"ocm": "1",
"id": "viratgunderi-cell-fuelstationpro-backend-instructions",
"kind": "skill",
"name": "FuelStation Backend Guardrails",
"description": "Use when editing backend Express routes, PostgreSQL schema, authentication, authorization, or security middleware in src/*.js.",
"publisher": "viratgunderi-cell",
"version": "1.0.0",
"capabilities": {
"domains": [
"general"
],
"tags": [
"skill-md",
"github-instructions"
],
"languages": [
"en"
]
},
"quality_prior": 0.6,
"examples": [
"Use when editing backend Express routes, PostgreSQL schema, authentication, authorization, or security middleware in src/*.js."
],
"primary": false,
"metadata": {
"source": {
"provider": "github-instructions",
"repository": "https://github.com/viratgunderi-cell/FuelStationPro",
"path": ".github/instructions/backend.instructions.md",
"ref": "c70bbd79272fa8b9e2b29fffaf21727934b4b142",
"url": "https://github.com/viratgunderi-cell/FuelStationPro/blob/c70bbd79272fa8b9e2b29fffaf21727934b4b142/.github/instructions/backend.instructions.md",
"key": "viratgunderi-cell/FuelStationPro/.github/instructions/backend.instructions.md"
},
"applies_to": "src/*.js"
},
"instructions": "# Backend Guardrails\n\n- Keep tenant separation strict: tenant-scoped queries must include tenant_id.\n- Use parameterized SQL only. Never concatenate user input into SQL strings.\n- Preserve role boundaries:\n - super: cross-tenant administration\n - admin/Owner/Manager: tenant-scoped operations\n - employee: minimal operation scope\n- For write operations that can race (sales, credit, readings), use transactional protection.\n- Preserve idempotency behavior where idempotency_key already exists.\n- Keep audit logging for high-risk operations (bulk delete, tenant delete, day lock, exports).\n- Avoid ",
"cost": {
"context_tokens": 186
}
}
